A solutions architect is designing a solution to process events. The solution must have the ability to scale in and out based on the number of events that the solution receives. If a processing error occurs, the event must move into a separate queue for review.Which solution will meet these requirements?
Answer(s): A
The selected solution is B because it integrates AWS Data Exchange directly with the Amazon Redshift cluster, allowing the company to create a datashare that enables secure and efficient data sharing with customers.This approach meets the requirements by:1.Subscription Verification: It confirms customer identities before granting access to the data.2.Real-Time Access: Customers can access the most recent data stored in Redshift, ensuring timely availability without manual intervention.By utilizing managed services, this solution minimizes operational overhead while effectively meeting the company's data sharing needs.
A company runs a processing engine in the AWS Cloud. The engine processes environmental data from logistics centers to calculate a sustainability index. The company has millions of devices in logistics centers that are spread across Europe. The devices send information to the processing engine through a RESTful API.The API experiences unpredictable bursts of traffic. The company must implement a solution to process all data that the devices send to the processing engine. Data loss is unacceptable.Which solution will meet these requirements?
Answer(s): B
A company is designing its network configuration in the AWS Cloud. The company uses AWS Organizations to manage a multi-account setup. The company has three OUs. Each OU contains more than 100 AWS accounts. Each account has a single VPC, and all the VPCs in each OU are in the same AWS Region.The CIDR ranges for all the AWS accounts do not overlap. The company needs to implement a solution in which VPCs in the same OU can communicate with each other but cannot communicate with VPCs in other OUs.Which solution will meet these requirements with the LEAST operational overhead?
Answer(s): C
The selected solution is C because provisioning a transit gateway in each OU simplifies VPC communication within the OU while ensuring isolation from other OUs.Key benefits of this approach include:1.Centralized Management: The transit gateway allows centralized routing for all VPCs within the OU, reducing complexity compared to managing individual VPC peering connections.2.Scalability: It easily accommodates additional accounts or VPCs within the same OU without needing extensive configuration changes.3.Isolation: By sharing the transit gateway only within the OU, communication with VPCs in other OUs is effectively blocked, meeting the company’s security requirements.This solution requires the least operational overhead while achieving the desired network architecture.
A company is migrating an application to AWS. It wants to use fully managed services as much as possible during the migration. The company needs to store large important documents within the application with the following requirements:1. The data must be highly durable and available2. The data must always be encrypted at rest and in transit3. The encryption key must be managed by the company and rotated periodicallyWhich of the following solutions should the solutions architect recommend?
The selected solution is B because using Amazon S3 meets all the company's requirements for storing large documents while leveraging fully managed services.1.High Durability and Availability: Amazon S3 is designed for 99.999999999% (11 nines) durability and offers high availability, making it suitable for storing critical documents.2.Encryption: S3 allows you to enforce HTTPS for secure data transmission, ensuring encryption in transit. Additionally, server-side encryption with AWS KMS (Key Management Service) allows for encryption at rest using customer-managed keys.3.Key Management: With AWS KMS, the company has full control over the encryption keys, including the ability to rotate them periodically according to its security policies.This solution offers a simple, scalable, and secure way to manage large documents in the cloud, aligning perfectly with the company's objectives of using fully managed services.
A company’s public API runs as tasks on Amazon Elastic Container Service (Amazon ECS). The tasks run on AWS Fargate behind an Application Load Balancer (ALB) and are configured with Service Auto Scaling for the tasks based on CPU utilization. This service has been running well for several months.Recently, API performance slowed down and made the application unusable. The company discovered that a significant number of SQL injection attacks had occurred against the API and that the API service had scaled to its maximum amount.A solutions architect needs to implement a solution that prevents SQL injection attacks from reaching the ECS API service. The solution must allow legitimate traffic through and must maximize operational efficiency.Which solution meets these requirements?
The selected solution is C because it effectively addresses the SQL injection attacks while maximizing operational efficiency.1.SQL Injection Protection: By creating an AWS WAF web ACL and adding a rule that specifically blocks requests matching known patterns associated with SQL injection attacks, you can directly target and prevent malicious traffic from reaching the API service.2.Allow Legitimate Traffic: The rule set in the web ACL will block only those requests that match the SQL injection patterns, while allowing all other legitimate traffic to pass through. This ensures that valid users can still access the API without disruption.3.Operational Efficiency: AWS WAF is a managed service that requires minimal operational overhead. Once configured, it automatically filters requests without the need for ongoing management or manual intervention, effectively enhancing the API's security posture.This approach provides a proactive security measure against SQL injection while maintaining performance and availability for legitimate users.
An environmental company is deploying sensors in major cities throughout a country to measure air quality. The sensors connect to AWS IoT Core to ingest timeseries data readings. The company stores the data in Amazon DynamoDB.For business continuity, the company must have the ability to ingest and store data in two AWS Regions.Which solution will meet these requirements?
The selected solution is C because it effectively addresses the requirements for data ingestion and storage in two AWS Regions while ensuring business continuity.1.Domain Configuration for AWS IoT Core: By creating a domain configuration for AWS IoT Core in each Region, the solution enables the sensors to connect to the nearest endpoint, enhancing data ingestion efficiency.2.Amazon Route 53 Health Checks: Implementing health checks allows the system to monitor the status of the IoT Core endpoints continuously. If one Region becomes unavailable, Route 53 can redirect traffic to the other Region seamlessly.3.Failover Routing Policy: The failover routing policy ensures that in case of a failure in one Region, the traffic is automatically routed to the other Region. This provides a robust mechanism for maintaining data ingestion without interruption.4.Global Tables in DynamoDB: Updating the DynamoDB table to a global table allows for automatic cross-Region replication of data. This ensures that the timeseries data from the sensors is consistently stored in both Regions, providing redundancy and durability.This approach maximizes resilience and guarantees that the company can continue to ingest and store air quality data even in the event of a Regional outage.
A company uses AWS Organizations for a multi-account setup in the AWS Cloud. The company's finance team has a data processing application that uses AWS Lambda and Amazon DynamoDB. The company's marketing team wants to access the data that is stored in the DynamoDB table.The DynamoDB table contains confidential data. The marketing team can have access to only specific attributes of data in the DynamoDB table. The finance team and the marketing team have separate AWS accounts.What should a solutions architect do to provide the marketing team with the appropriate access to the DynamoDB table?
The selected solution is B because it allows the marketing team to access specific attributes of the DynamoDB table while maintaining fine-grained access control. By creating an IAM role in the finance team's account with appropriate policy conditions for the desired DynamoDB attributes, and establishing trust with the marketing team's account, the marketing team can assume this role to access the data they need. This approach ensures that the marketing team only gets access to the specific attributes they are permitted to see, without exposing the entire table's contents, thereby adhering to data confidentiality requirements.
A solutions architect is creating an application that stores objects in an Amazon S3 bucket. The solutions architect must deploy the application in two AWS Regions that will be used simultaneously. The objects in the two S3 buckets must remain synchronized with each other.Which combination of steps will meet these requirements with the LEAST operational overhead? (Choose three.)
Answer(s): A,B,E
The selected solutions are A, B, and E because they effectively ensure that the objects in the two S3 buckets remain synchronized while minimizing operational overhead:-A: Creating an S3 Multi-Region Access Point allows the application to seamlessly access and manage the S3 buckets across different regions. It simplifies the connection to the buckets without requiring multiple configurations in the application.-B: Configuring two-way S3 Cross-Region Replication (CRR) ensures that any changes made to the objects in one bucket are automatically replicated to the other bucket. This provides real-time synchronization between the two regions.-E: Enabling S3 Versioning on each bucket ensures that all versions of an object are preserved, allowing for easy recovery and management of objects in case of accidental deletions or overwrites. This is essential for maintaining data integrity across regions.Together, these steps provide a robust solution for synchronizing objects in S3 buckets across two AWS regions with minimal management efforts.
Post your Comments and Discuss Amazon AWS-SOLUTIONS-ARCHITECT-PROFESSIONAL exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the AWS-SOLUTIONS-ARCHITECT-PROFESSIONAL content, but please register or login to continue.